CVE-2026-33446

Critical

Description

CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite a small portion of memory conceivably leading to memory corruption or a denial of service.

SeverityCritical
CVSS9.8
Exploit probability—
ProductAbsolute Secure Access
PublishedApr 30, 2026
First seenApr 30, 2026
Weakness typeCWE-120CWE-120

How to fix

Update
  • absolute secure_access14.50 or later

Affected products

ProductAffected versionsFixed in
absolute secure_accessv < 14.5014.50

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.